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In the official action on page 2 thereof, the Examiner asserts that "the security level of a 
request (see column 8, lines 33-37 of McNabb) is "analogous to the trust level of the 
present c aims." With all due respect to the Examiner, that is a misconception. 

Security levels in McNabb are dearly defined as describing the sensitivity (e.g. 
classifica ion) of the data of the object. (See McNabb column 8, lines 34-38 - cited by the 
Examine]) 



McNabb 
"sensitive 
trusted 



fully realizes that trust is completely different concept than is either 
ty level" or "security level". Note the definition which McNabb provides for a 
computer system at column 8/ lines 41-45, 



McNabb 
seems to 
happening 
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Looking 
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of trust w 
be, trust 
informati 
hostile 



goes on to talk about trusted computers in his patent, but when he does so it 
se in terms of definition given at column 8, lines 41-45, What is basically 
here is that McNabb assumes away the problem of a non trusted computing 
and just assumes that the system which he uses can be trusted. That is, it 
"sufficient hardware and software integrity measures that could be relied on 
sensitive or classified information..." 



The present disclosure is concerned with employing integrity measures to ensure that a 
computer system can, in fact, be trusted. 



iiti 



it another way, the "security level" has to do with whether or not the user 
trusted. For example, security level asks the question "does the user have a 
sufficiently high security level on the computer to perform certain actions"? The level 
orks in the opposite direction. Can a user, whatever their security level might 

computer that they are using to reliability "process sensitive or classified 
on without fear of denial of service, data theft or corruption resulting from 
acpvity" as mentioned in McNabb? That has nothing to do with their access 
(their security level). 



privileges 



The applicant has, in the past argued that McNabb does not disclose the claimed 
inventioni The Examiner states otherwise, but only by asserting that the sensitivity level 
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of requests is "analogous" to the trust level recited in the present claims (to use the 
Examine! / s phraseology). Of course, saying one thing is analogous to another thing 
does not nake necessarily it so and it is submitted that based on McNabb's own 
teaching, security and trust are completely two different concepts. 



noted that the definition used for trust in McNabb is consistent with how the 



term trus t is used in the present application. For example, whether or not a user can 



properly 



"trust," a computing platform can depend, for example, on many things, 



including whether or not the computer's BIOS has been compromised. The potential 
problems associated with a compromised BIOS and techniques for ensuring that the 
boot process is secure are discussed in the present application. See, for example, 
paragrap is [0035) through [0041] of the present application, noting that the following 
sentences can be found in paragraph [0041]: 

''lA the present embodiment the integrity metric is acquired by the measurement 
function 31 by generating a digest of the BIOS instructions in the BIOS memory, 
Su ch an acquired integrity metric, if verified as described above, gives a potential 
u&»r of the platform 10 a high level of confidence that the platform 10 has not 
be- in subverted at a hardware, or BIOS program, level/' 



essence 
unless 
and that 



public/ rich/: 



The bottolm line is that the applicant basically has several issues with the Examiner's 
rejection of claim 1, First, by using an analogy argument the Examiner is in essence 
acknowledging that his rejection under 35 USC 102 is without merit The Examiner is in 
admitting that McNabb does not teach and every element of the rejected claims 
untenable analogy is made. The rejection under 35 USC 102 is improper 
rejection would have at least have to be under 35 USC 103, that is, an 
obviousness rejection, since by the analogy argument the examiner is in essence 
that which McNabb teaches. However, since this rejection is really an 
obviousness rejection, the applicant has further issues with it mainly: 



some 



the: 



It is not seen how it would be obvious to modify McNabb so as to handle 
the recited levels of trust when McNabb basically assumes that this system 
enjoys the highest possible level of trust (that is, there is one level of trust in 
McNabb). 
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Moreover, if McNabb can somehow be modified to meet the objection 
n<j>ted above, then what prior art reference(s) does the Examiner rely upon to 
make such a rejection? Hie applicant is entitled to know the identity of the prior 
art and since the Examiner uses the word "analogous" in the rejection, the 
applicant is assuming that the Examiner must have some knowledge of some 
piior art, which is not disclosed in the official action, to justify the rejection. 
Anyway, the Examiner is either requested (i) to cite a prior art reference 
upporting his contentions or, if the Examiner is relying upon "facts within the 
knowledge" of the Examiner, (ii) to provide the affidavit specified by 
rules of practice. (See 37 CFR 1.104(d)(2)). 



personal 



to claim 24, McNabb does not teach "service management process adapted 
a service description which includes levels of trust assigned to process this 
service ..." As indicated above, McNabb knows nothing about levels of trust 
to assume that the computer platform in question has "sufficient hardware 
integrity measures" without reference to "levels of trust" 



The rejections of the claims in this application, with all due respect to the Examiner, are 
not merit orious. Reconsideration is respectfully submitted. 



The Comfriissioner 
or credit 
not timelt- 
a petition 
extension 



is authorized to charge any additional fees which may be required 
overpayment to deposit account no. 12-0450. In particular, if this response is 
filed, then the Commissioner is authorized to treat this response as including 
to extend the time period pursuant to 37 CFR 1.136 (a) requesting an 
of time of the number of months necessary to make this response timely filed 
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